This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/pS4czhoauAZOXBr_Cje6bwoBTlc.roa File: pS4czhoauAZOXBr_Cje6bwoBTlc.roa (raw, json) Hash identifier: NT2gpfEyWcXZuliOuES0FFLRLjCv5Hd244OJm3lkfC0= Subject key identifier: A5:2E:1C:CE:1A:1A:B8:06:4E:5C:1A:FF:0A:37:BA:6F:0A:01:4E:57 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B2958E3DF033D30A4218ED6F77ABAD455 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/pS4czhoauAZOXBr_Cje6bwoBTlc.roa Signing time: Tue 16 Dec 2025 22:47:29 +0000 ROA not before: Tue 16 Dec 2025 22:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 5.180.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:58:e3:df:03:3d:30:a4:21:8e:d6:f7:7a:ba:d4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Dec 16 22:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a52e1cce1a1ab8064e5c1aff0a37ba6f0a014e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:1b:eb:d4:f8:84:e5:f8:db:24:0c:a4:b9: 8f:8a:0f:05:67:13:17:7c:cb:3f:2e:24:33:15:83: 3d:fd:67:a2:3d:f8:e2:9d:e0:84:fc:16:9a:5a:9c: be:0e:b0:0a:3b:f4:68:17:90:b7:b0:ee:c0:2e:4f: 02:1c:bb:01:fa:6a:95:07:ac:6a:65:ab:51:0d:a0: 71:65:d3:79:06:e9:7b:e2:35:fd:aa:6e:5b:f6:3b: ad:12:29:c2:a5:a8:8d:67:ab:ec:d4:b7:03:d6:84: 7b:fd:7c:d9:64:8b:dc:46:64:08:72:86:c6:e5:9a: d1:06:a5:c5:37:c7:f2:03:a5:c1:ab:e6:c0:47:e1: c5:a6:51:d5:ee:cf:d4:0e:20:ec:03:32:90:c5:5b: 0b:91:12:8f:79:f4:8c:31:9c:25:42:f6:5b:85:c1: d0:af:60:14:46:f3:78:29:4a:17:e6:d1:2d:d5:65: 7a:1c:5e:c8:6a:1f:2e:c7:98:54:a7:ea:47:9a:58: 4d:b3:18:da:ab:86:95:93:ca:84:71:c6:be:77:a7: d1:6c:61:4e:34:97:bd:dc:90:8b:a6:ad:5a:97:9d: aa:87:12:1b:f0:ab:70:e6:ac:e1:3d:d1:60:0e:f1: 73:e7:8d:b7:c1:95:7c:da:0b:57:39:29:34:44:28: e7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2E:1C:CE:1A:1A:B8:06:4E:5C:1A:FF:0A:37:BA:6F:0A:01:4E:57 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/pS4czhoauAZOXBr_Cje6bwoBTlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.81.0/24 Signature Algorithm: sha256WithRSAEncryption a7:0b:f0:ef:b3:66:79:13:f3:5b:4c:69:a1:1a:70:f4:37:db: 52:b0:de:f6:90:01:b4:52:f9:26:00:e6:a1:79:7f:bb:45:1a: 17:c6:19:39:7f:19:4c:03:b5:04:db:dc:44:b0:39:46:61:34: 22:6d:1e:b1:b7:59:e3:ed:64:8c:97:f3:c1:93:56:13:df:78: cd:bc:59:29:f1:ef:af:4f:11:54:aa:a8:40:88:8e:9d:34:03: 0f:9c:e7:8b:f9:25:36:a2:52:ac:b7:c5:38:48:11:2a:00:e5: 4a:9c:14:5a:00:3a:2d:0e:4c:45:be:02:6a:4d:3e:c3:9b:07: d9:bd:56:e9:3e:e1:cb:fa:fd:79:9a:8d:de:a7:10:18:d1:18: 53:90:2a:82:2f:e6:07:ef:df:b6:2e:4a:e8:f7:75:a5:db:32: 88:29:76:47:2e:96:2a:f7:8b:3a:7f:94:aa:16:4c:5d:61:1c: ea:e5:df:dc:26:f4:07:3d:0b:8f:06:33:f0:0c:fc:c0:b0:8c: 83:70:3c:f0:58:04:db:81:7b:7b:5b:fe:b2:21:86:e4:da:70: 87:67:86:ce:ab:54:11:d9:81:c5:02:ab:a6:e0:f7:d5:3b:6c: 55:2e:93:0d:48:e7:4f:ce:24:a0:94:83:30:6c:e4:cf:5c:f0: 2a:d4:d1:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZspWOPfAz0wpCGO1vd6utRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMjE2MjI0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTJlMWNjZTFhMWFiODA2NGU1YzFhZmYwYTM3YmE2ZjBhMDE0ZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk4b69T4hOX42yQMpLmPig8FZxMX fMs/LiQzFYM9/WeiPfjineCE/BaaWpy+DrAKO/RoF5C3sO7ALk8CHLsB+mqVB6xq ZatRDaBxZdN5Bul74jX9qm5b9jutEinCpaiNZ6vs1LcD1oR7/XzZZIvcRmQIcobG 5ZrRBqXFN8fyA6XBq+bAR+HFplHV7s/UDiDsAzKQxVsLkRKPefSMMZwlQvZbhcHQ r2AURvN4KUoX5tEt1WV6HF7Iah8ux5hUp+pHmlhNsxjaq4aVk8qEcca+d6fRbGFO NJe93JCLpq1al52qhxIb8Ktw5qzhPdFgDvFz5423wZV82gtXOSk0RCjnBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKUuHM4aGrgGTlwa/wo3um8KAU5XMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvcFM0Y3pob2F1QVpPWEJyX0NqZTZid29CVGxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbRRMA0G CSqGSIb3DQEBCwUAA4IBAQCnC/Dvs2Z5E/NbTGmhGnD0N9tSsN72kAG0UvkmAOah eX+7RRoXxhk5fxlMA7UE29xEsDlGYTQibR6xt1nj7WSMl/PBk1YT33jNvFkp8e+v TxFUqqhAiI6dNAMPnOeL+SU2olKst8U4SBEqAOVKnBRaADotDkxFvgJqTT7DmwfZ vVbpPuHL+v15mo3epxAY0RhTkCqCL+YH79+2Lkro93Wl2zKIKXZHLpYq94s6f5Sq FkxdYRzq5d/cJvQHPQuPBjPwDPzAsIyDcDzwWATbgXt7W/6yIYbk2nCHZ4bOq1QR 2YHFAqum4PfVO2xVLpMNSOdPziSglIMwbOTPXPAq1NFr -----END CERTIFICATE-----Generated at Fri Dec 19 10:18:05 2025 by rpki-client